$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d7d2b463-fb46-3628-a1a8-a3d28da18923.roa File: d7d2b463-fb46-3628-a1a8-a3d28da18923.roa (raw, json) Hash identifier: 7nxHU65uj+kQOMmbORxmtP1Pzl3/1wPMO/CONlQ3QP8= Subject key identifier: D3:3B:37:65:B3:B5:4B:8B:C1:2A:DC:CF:87:80:78:3B:E8:67:C1:D7 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848BFEBD33BE8567FCFD254E940 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d7d2b463-fb46-3628-a1a8-a3d28da18923.roa Signing time: Sun 02 Feb 2025 14:00:53 +0000 ROA not before: Sun 02 Feb 2025 14:00:53 +0000 ROA not after: Sat 03 May 2025 13:00:53 +0000 asID: 396982 IP address blocks: 104.198.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bf:eb:d3:3b:e8:56:7f:cf:d2:54:e9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 2 14:00:53 2025 GMT Not After : May 3 13:00:53 2025 GMT Subject: CN=7953eab4-8341-4266-897b-bbc0804ff9bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:3b:e5:03:1e:8c:20:86:ac:b7:03:60:02:c0: 54:e3:1f:bd:52:8f:83:23:9c:56:b1:34:39:6a:ef: 29:8b:9b:99:cc:78:53:07:36:9c:15:d9:49:dc:6c: 8e:90:15:7a:ce:b7:77:d6:d6:21:7f:d9:22:7c:a4: c3:51:e4:ac:22:b1:a7:05:7a:db:c4:fe:78:3a:45: 86:23:2f:a3:33:03:1d:10:8f:d9:ba:19:48:9b:34: b9:68:94:65:e6:78:c4:18:13:b0:d1:4d:8c:a1:ab: 23:6d:2a:5a:44:0a:f1:95:40:66:b4:5c:03:0e:ae: cb:be:d8:1a:4f:13:0b:31:b7:c6:b0:2c:0d:b4:69: b4:fc:74:69:a9:77:8f:f7:78:21:19:6b:e6:69:df: ac:d1:b9:ee:06:fe:a9:8c:25:10:39:f7:c3:74:1e: 3e:02:ee:56:e3:61:3a:c8:01:25:8d:0c:cc:cd:b4: bb:6a:87:26:db:fc:c5:9e:c5:f7:6c:db:57:ac:3e: 1a:b3:45:6a:4a:9d:86:aa:6a:ea:3b:10:44:31:e7: 47:72:ab:be:42:29:22:30:a4:8d:fa:f9:2e:e6:04: 67:3e:4c:b7:6e:ce:7b:2f:0f:71:99:84:52:54:5c: 61:91:a6:1b:81:66:ed:2b:fd:22:f3:00:72:82:25: 20:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:3B:37:65:B3:B5:4B:8B:C1:2A:DC:CF:87:80:78:3B:E8:67:C1:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d7d2b463-fb46-3628-a1a8-a3d28da18923.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 104.198.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:eb:4a:07:5e:84:a7:e5:dd:5b:a5:c2:26:81:9f:4b:85:2d: 34:a2:bf:be:78:26:31:5a:9f:16:bc:7c:bc:e1:5a:e9:1e:a7: 07:a6:1e:95:bf:86:20:5b:af:7b:99:03:6a:38:e5:e9:c0:77: d2:90:ed:04:2e:7c:d0:4f:f2:93:47:e9:91:70:3e:ea:43:8f: 7b:f7:61:3f:c9:d4:f3:6d:98:86:4f:7c:8b:53:68:d6:38:75: 1e:76:10:cf:d5:f8:78:ac:39:11:e8:9d:97:e2:43:6b:0a:fb: a9:c2:a0:21:ba:22:2d:3f:c2:d0:90:f4:23:89:ad:99:99:d6: bc:f4:b2:f5:b3:8a:2f:86:ea:65:c7:96:ef:76:3d:be:17:e3: 19:87:59:78:d1:a7:ed:cc:74:77:13:43:a2:78:43:15:89:00: c7:cc:5c:aa:18:0f:fe:af:80:b8:a6:77:de:10:87:55:38:ec: a5:d5:93:f1:3f:2c:b8:be:d3:ed:39:d0:09:00:dc:1f:e4:27: 44:ed:20:b4:b0:0a:9e:06:27:35:9d:b2:96:63:7f:e1:65:ec: a5:d7:35:d2:ef:ea:53:8b:be:d5:ac:03:c2:44:d4:82:9f:7f: 80:41:62:1b:ba:84:cf:4a:4c:21:46:16:26:fb:4b:5f:b9:6c: 60:1d:fe:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/69M76FZ/z9JU6UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk Nzk1M2VhYjQtODM0MS00MjY2LTg5N2ItYmJjMDgwNGZmOWJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDvlAx6MIIastwNgAsBU4x+9Uo+DI5xWsTQ5 au8pi5uZzHhTBzacFdlJ3GyOkBV6zrd31tYhf9kifKTDUeSsIrGnBXrbxP54OkWG Iy+jMwMdEI/ZuhlImzS5aJRl5njEGBOw0U2MoasjbSpaRArxlUBmtFwDDq7Lvtga TxMLMbfGsCwNtGm0/HRpqXeP93ghGWvmad+s0bnuBv6pjCUQOffDdB4+Au5W42E6 yAEljQzMzbS7aocm2/zFnsX3bNtXrD4as0VqSp2GqmrqOxBEMedHcqu+QikiMKSN +vku5gRnPky3bs57Lw9xmYRSVFxhkaYbgWbtK/0i8wBygiUgcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNM7N2WztUuLwSrcz4eAeDvoZ8HXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDdkMmI0NjMtZmI0Ni0z NjI4LWExYTgtYTNkMjhkYTE4OTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaMbAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI3rSgdehKfl3VulwiaBn0uFLTSiv754JjFanxa8fLzhWukepwemHpW/ hiBbr3uZA2o45enAd9KQ7QQufNBP8pNH6ZFwPupDj3v3YT/J1PNtmIZPfItTaNY4 dR52EM/V+HisORHonZfiQ2sK+6nCoCG6Ii0/wtCQ9COJrZmZ1rz0svWzii+G6mXH lu92Pb4X4xmHWXjRp+3MdHcTQ6J4QxWJAMfMXKoYD/6vgLimd94Qh1U47KXVk/E/ LLi+0+050AkA3B/kJ0TtILSwCp4GJzWdspZjf+Fl7KXXNdLv6lOLvtWsA8JE1IKf f4BBYhu6hM9KTCFGFib7S1+5bGAd/tg= -----END CERTIFICATE-----Generated at Fri Apr 4 21:42:59 2025 by rpki-client